Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About hhiggins
About hhiggins
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Thursday
21Posts
12Likes
0Solutions
Jul 02, 2020Last Visited
User
Activity
User
Profile
Latest posts by hhiggins
| Subject | Views | Posted |
|---|---|---|
| 56 | Thursday | |
| 717 | 05-21-2020 08:00 AM | |
| 952 | 05-21-2020 07:56 AM | |
| 1034 | 05-21-2020 07:48 AM | |
| 552 | 05-14-2020 06:00 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 05-21-2020 07:48 AM | |
| 1 | 05-21-2020 07:56 AM | |
| 3 | 04-21-2020 10:38 AM | |
| 1 | 04-24-2020 05:50 AM | |
| 2 | 04-14-2020 03:45 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 1 | |||
| 1 | |||
| 1 | |||
| 2 |
User Badges
Public Statistics
| Date Registered | 01-22-2013 12:31 PM |
| Date Last Visited | Thursday |
| Total Messages Posted | 21 |
| Total Likes Received | 12 |
Thursday
Arg! @hisingh ....Same problem again @AaronBeck . Virus/Win32.WGeneric.aktpum has been setting off alarm bells.
... View more
05-21-2020
08:00 AM
@Graeme_Riddell we are having issues getting Cortex XDR syslog data into our Rapid7 IDR SIEM as well. It looks like it can be configured at the Cortex XDR layer or at the Data Lake layer using the forwarding app.Where are you configuring syslog?
... View more
05-21-2020
07:56 AM
1 Kudo
@pkawula that is what we do. We implement Bitlocker via GPO and monitor through the Cortex XDR console. Using the Cortex XDR console alerted us to the fact that we were only using 128-bit encryption. We have since used GPO to enable 256-bit encryption going forward. Prior to Cortex XDR we had no visibility into this.
... View more
05-21-2020
07:48 AM
1 Kudo
I don't see anything specifically listed for VMware View on the compatibility matrix. https://docs.paloaltonetworks.com/compatibility-matrix/cortex-xdr/where-can-i-install-the-cortex-xdr-agent
... View more
05-14-2020
06:00 AM
Starting yesterday I have seen virus alerts on my firewall relating to the above virus. The file names in question are Teams.nuspec and Teams-1.3.00.12058-full.nupkg. Googling around it appears the files are legit. File 1.3.00.12058-full.nupkg is the same version of the latest MS Teams update. Last month at this time I had false positive virus alerts for the same virus, but the file name was Onedrive.exe. Anyone else seeing this?
... View more
04-24-2020
05:50 AM
1 Kudo
I see bitlocker information as you do in your screenshot! When I looked before posting it was empty I swear 🙂 Thanks
... View more
04-22-2020
01:51 PM
Thanks @dfalcon. I have been through that document prior to posting. I wasn't clear what, if anything, I needed to do for my use case. I will wait to hear back from you if this is even possible. Thanks
... View more
04-22-2020
12:03 PM
I was reading about the new Bitlocker functionality in the new release. We have Bitlocker already deployed in the organization and would like to know if I could use the CortexXDR console as only a "view" or status into the status of Bitlocker on already deployed machines? I am not wanting to control/configure Bitlocker from the CortexXDR console. Is this possible? Thanks
... View more
04-21-2020
10:41 AM
Yes lots of goodies in this release. I was reading the release notes this morning. We have bitlocker already deployed in the organization. If I reading correctly, it sounds like I would be able to display the status of bitlocker in the Cortex XDR console even though we use GPO's for enablement and control.
... View more
04-21-2020
10:38 AM
3 Kudos
Thank you @dfalcon! Feels like it is hidden away. They should be making this a submenu directly off of the Investigation menu.
... View more
04-21-2020
08:04 AM
Hi, I can't seem to find what I'm looking for in the Cortex XDR console. I am trying to find a way to view all alerts generated whether it is from XDR or Analytics. The only way I can see this list is if I create an exclusion Investigation --> Exclusions --> Add Exclusion. Is there a more direct way to view these Alerts? Thanks
... View more
04-16-2020
05:43 AM
@hisingh I have had no alerts for 24 hours now. I would consider this resolved at this point. Thanks
... View more
04-15-2020
05:56 AM
@hisingh I still see the EXE being flagged as a virus. Today, with the new content updates, the virus is being flagged differently. Virus/Win32.WGeneric.ajepxx ID 341677293 @AaronBeck @abrickeen are you seeing this as well?
... View more
04-14-2020
03:45 PM
2 Kudos
Thanks @hisingh . I will check tomorrow to see if this behavior stops. Does this mean there was an issue identified with the Antivirus content?
... View more
04-14-2020
10:57 AM
1 Kudo
@abrickeen I would agree it is likely a false positive. We need PAN to adjust their content signatures. For me, this started with the Antivirus 3316-3827 content version.
... View more
04-14-2020
08:44 AM
2 Kudos
@hisingh , This is NOT resolved. This is STILL a problem.
... View more
04-14-2020
06:20 AM
Make sure you have the two certificates installed on the machine then try to re-start the installation.
... View more
04-14-2020
06:07 AM
1 Kudo
Hi, Since yesterday April 13/2020 I have been getting Virus alerts in the Threat log on my PAN 3020. It has pointed out that OneDriveSetup.exe is the culprit. I went to a few machines and searched for OneDriveSetup.exe and uploaded it to VirusTotal. All came back clean. I then ran a malware scan (Cortex) on a few machines and again it came back clean. I waited until today to see if the new AV signatures were adjusted, but they were not as I am still getting alerts today. Has anyone else received these? From what I am seeing it is looking like a false positive. Thanks
... View more
- Tags:
- virus
11-06-2019
06:56 AM
I would like to know if 2FA is available to protect logons to any of the cloud services, specifically TMS, Cortex XDR, etc. I have 2FA enabled on my account I used to logon to the support site, which is the same account used to logon to the cloud sites. I was hoping this would then transfer to the cloud apps. It does not unless I am missing something. Thanks
... View more
01-09-2018
07:03 AM
Check out this list for AV vendor compatibility... hxxp://myitforum.com/myitforumwp/2018/01/09/the-master-list-of-antivirus-compatibility-with-microsofts-meltdownspectre-patches/ Heath
... View more
Latest Blogs
Copyright 2007 - 2020 - Palo Alto Networks
